Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft
File:                     D9B568DACE796AFC606BD299D9DA57F714CD7970.mft (raw, json)
Hash identifier:          RqOE+ntr4zFZSkkpjCHV8prX4o+Hkvebol7ecla4DpA=
Subject key identifier:   3E:DE:1D:6B:39:A1:46:43:A5:EE:11:A6:C9:BA:4A:5D:48:55:BE:3A
Authority key identifier: D9:B5:68:DA:CE:79:6A:FC:60:6B:D2:99:D9:DA:57:F7:14:CD:79:70
Certificate issuer:       /CN=D9B568DACE796AFC606BD299D9DA57F714CD7970
Certificate serial:       64C5077A9CB6CE1F02D3686E5E1A15F667CC89F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft
Manifest number:          B2
Signing time:             Thu 30 Jan 2025 04:00:59 +0000
Manifest this update:     Thu 30 Jan 2025 03:55:59 +0000
Manifest next update:     Sun 02 Feb 2025 11:53:59 +0000
Files and hashes:         1: 3130332e3130352e3139362e302f32332d3234203d3e20313337323837.roa (hash: 5Xv6mrgfWe+rWcCn7CecS/d4Z1XQ/6GwMQiiafaEOqI=)
                          2: D9B568DACE796AFC606BD299D9DA57F714CD7970.crl (hash: ECyaxuiGpNnzbsBihEjpgYP+WOMolx2mh0xhDIy6ldU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c5:07:7a:9c:b6:ce:1f:02:d3:68:6e:5e:1a:15:f6:67:cc:89:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B568DACE796AFC606BD299D9DA57F714CD7970
        Validity
            Not Before: Jan 30 03:55:59 2025 GMT
            Not After : Feb  2 11:53:59 2025 GMT
        Subject: CN=3EDE1D6B39A14643A5EE11A6C9BA4A5D4855BE3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2d:d3:f7:f8:e0:81:35:8c:94:dd:fc:77:ec:
                    11:ce:ce:b7:20:f8:07:81:9a:67:a2:6b:3c:e0:f5:
                    44:29:35:74:1a:cd:e2:5b:49:ba:cd:98:bf:81:0d:
                    8d:4f:11:a5:2f:55:0c:b7:b5:11:08:06:c8:ad:49:
                    7d:68:96:2b:c4:df:21:62:ca:08:6f:f7:d4:22:a9:
                    dd:bb:f0:9b:9d:fc:44:2f:49:d5:16:90:e8:1d:e3:
                    1f:58:ca:84:1c:3e:3f:ec:d2:bf:42:9d:32:55:41:
                    87:f9:7c:42:e1:18:6f:93:53:34:1a:c2:f4:c2:31:
                    cd:93:d2:04:de:63:2a:ae:64:cb:f2:f5:6c:80:e4:
                    54:fc:88:e0:52:bc:47:fd:04:69:2d:49:32:6d:05:
                    a6:aa:aa:d0:f1:6a:af:01:be:9c:03:5b:78:0c:77:
                    f9:c6:2b:4e:50:18:50:a8:2a:de:68:b5:a2:26:39:
                    75:93:bc:d5:d1:fa:36:04:f4:86:60:d2:48:1e:07:
                    8c:7d:46:dc:1f:c4:26:01:84:24:d1:6b:9a:28:71:
                    54:f3:02:f1:dd:7a:e1:2b:e1:b6:ef:45:24:40:3b:
                    40:ce:d0:d4:7e:70:55:07:93:01:06:b1:b7:3f:74:
                    1a:bb:a2:45:81:30:28:b6:8e:e1:51:a0:e8:23:5c:
                    6e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DE:1D:6B:39:A1:46:43:A5:EE:11:A6:C9:BA:4A:5D:48:55:BE:3A
            X509v3 Authority Key Identifier:
                keyid:D9:B5:68:DA:CE:79:6A:FC:60:6B:D2:99:D9:DA:57:F7:14:CD:79:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b2:48:cd:98:78:fa:31:05:37:29:0a:74:6a:9b:a9:51:8c:
         68:6d:b4:55:17:d0:9f:38:ef:a8:ee:40:a0:45:fb:11:8b:d8:
         32:f6:47:ce:ee:41:c3:04:13:e3:f3:04:b3:84:90:5a:f5:76:
         40:a5:1f:01:06:2b:b1:a6:81:42:a3:87:92:c9:0a:af:3f:c9:
         2e:b7:90:c0:62:ef:74:b7:ba:ee:bf:15:ee:e7:fd:b9:3a:17:
         11:4d:5a:ed:d3:af:82:68:f3:ec:75:48:a3:c1:df:c5:94:5a:
         ee:35:c5:51:0c:7b:b6:2e:51:38:50:10:49:8c:73:ce:d1:0a:
         98:96:57:fb:af:4b:72:67:de:6e:13:28:3d:bb:29:db:0e:ff:
         12:10:04:1a:f4:0f:dd:8c:06:f8:b9:1a:aa:97:0a:e2:9e:9e:
         31:93:8a:64:d4:b8:63:12:cb:8d:d8:98:05:80:ac:14:cc:e3:
         9f:a0:65:a2:a6:5e:19:7e:94:83:f9:00:33:ba:45:fc:d4:44:
         c2:eb:6b:60:38:6d:84:05:e2:da:f1:ad:23:09:9e:4d:94:18:
         08:27:71:d7:99:55:96:68:c5:5b:6f:46:d2:46:60:16:c6:25:
         00:21:e8:2c:d9:63:8e:5c:97:a8:15:37:2d:25:16:51:2b:0b:
         dc:1d:c6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:48 2025 by rpki-client